Independent thinking. Informed defence.

CISO Times

Intelligence for the people behind the defence.

The CISO Decision Brief

News

Cybersecurity Alert: Hacktivist Group Seizes NATO Documents, Motel One Hit by Ransomware

ransomware

In a chilling cyber twist, the hacktivist collective SiegedSec has declared its possession of NATO documents. This revelation follows their successful infiltration of the North Atlantic Alliance’s servers earlier this year, sending shockwaves through the cybersecurity landscape.

NATO Launches Investigation

The North Atlantic Treaty Organization (NATO) swiftly responded to this alarming breach by initiating a comprehensive investigation. NATO authorities are leaving no stone unturned as they meticulously probe whether these cybercriminals have gained access to sensitive strategic planning and research documents within their IT infrastructure. Stay tuned for forthcoming details as NATO officials promise transparency in sharing their findings.

Hacktivist Group’s Bold Move

To bolster their claims, SiegedSec, a politically motivated hacktivist group with no connection to the ALPHV ransomware gang, took a daring step by publishing a segment of the stolen data on their Telegram channel. Their assertion is that this trove of information was acquired approximately three months ago from the organization’s website servers.

Motel One’s Ransomware Nightmare

In a parallel cybersecurity incident, Motel One, a budget hotel chain headquartered in Germany, fell prey to a malevolent ransomware attack. The attackers most likely tried to carry out a ransomware attack but, according to the company, had only limited success, and its business operations were never at risk. Motel One, which operates more than 90 hotels, said the hackers had stolen customer addresses and the details of 150 customer credit cards.

Lessons Learned and Suspicions Arise

Despite the relatively limited impact, Motel One is now actively seeking expert guidance to fortify its defenses against potential future cyber onslaughts. Initial suspicions point toward the ALPHV ransomware gang as the culprit. The gang claimed on its leak site to have stolen about 6 terabytes of data (nearly 24.5 million files), including booking confirmations and internal company documents.

Conclusion

Notably, both of these European-based entities find themselves situated in a region that staunchly supports Ukraine amidst its ongoing conflict with Russia. The two incidents are not linked, however: SiegedSec is a hacktivist group, while ALPHV is a double-extortion ransomware gang that claimed the attack on MGM Resorts earlier this year. Caesars Entertainment, hit in a similar attack at the same time, reportedly paid a ransom; MGM did not.

Correction, 26 October 2026: this article said NATO’s documents were classified, described SiegedSec as a subset of ALPHV and said both incidents involved ALPHV, said the Motel One attack caused significant downtime and exposed 169 credit cards, and said MGM Resorts paid a ransom; NATO said the affected websites were unclassified (The Register); SiegedSec is an unrelated hacktivist group, and only the Motel One attack is attributed to ALPHV; Motel One said its business operations were never at risk and 150 credit cards were affected (BleepingComputer); MGM did not pay a ransom (The Register).